docs: note the new repo split and the still-unbuilt license-validation flow

README.md

@@ -29,6 +29,20 @@
 
 </div>
 
+> **This is the public ARGUS installer repository.** It contains no proprietary source
+> code — only installation scripts, configuration templates, and public documentation.
+> Application source lives in private repos under the Weboria organization on Gitea:
+> [`argus-appliance`](https://git-cloud.weboria.eu/weboria/argus-appliance) and
+> [`anis-intelligence-server`](https://git-cloud.weboria.eu/weboria/anis-intelligence-server).
+> Build/release automation lives in
+> [`argus-build`](https://git-cloud.weboria.eu/weboria/argus-build). Never commit
+> application source, internal docs, or credentials into this repo.
+>
+> **Known gap, not yet built:** `install.sh` today pulls public GHCR images with no
+> license validation — it does not yet implement the "validate license → authenticate
+> against a private registry → pull official images" flow. That needs a licensing
+> service and private-registry auth design before `install.sh` can be updated to match.
+
 ## ✨ Key Features
 
 ### 🛡️ Web Application Firewall